Setup_102024[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

Setup_102024.exe
Size

81.8MB
MD5

aa9df11a7314deb9bd74e553fff7904a
SHA1

9f696edf45a8e4c98383331714f40668dba64b39
SHA256

3f88cb4a1a94b487294a3e072d91c2dd4d21c2e5345129e841b906343db29056
SHA512

08614e5a7c714a97117776a9104ecea1dede6a2569dff5647922e583fa9ba64abb9b0b0e6253fac7e912217fbe97ff2fc7a16cd27cd3f567049974279a44fea8
SSDEEP

786432:4vV1SVLzDLVf6N5dWyMg2rkzO7dnQ6WIYC8:4v5N5gykCORnQQ8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Setup_102024.exe

Files

Setup_102024.exe
.exe windows:5 windows x86 arch:x86

c2e4791889cf24c2db73f150fc6c89c6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleMode
GetEnvironmentStringsW
SetFilePointer
GetTimeZoneInformation
FreeEnvironmentStringsA
GlobalUnlock
GetCurrentProcess
GetDateFormatA
GetCurrentProcessId
DeleteCriticalSection
DeleteFileA
GlobalAlloc
GetProcessAffinityMask
GetLogicalDriveStringsW
EnterCriticalSection
CompareStringA
VirtualAlloc
GetStringTypeA
GetSystemInfo
GetEnvironmentVariableA
GetUserDefaultLCID
SetUnhandledExceptionFilter
FindFirstFileW
MoveFileExW
GetFileInformationByHandle
RtlUnwind
GetConsoleCP
IsDebuggerPresent
LoadLibraryW
SetLastError
LoadLibraryA
QueryPerformanceCounter
HeapAlloc
TlsAlloc
LocalFree
CreateSemaphoreW
GetProcessHeap
GetCurrentDirectoryA
VerSetConditionMask
MoveFileW
GetCurrentDirectoryW
Sleep
GlobalLock
FlushFileBuffers
GetStartupInfoA
IsProcessorFeaturePresent
LeaveCriticalSection
ReleaseSemaphore
ExitThread
VerifyVersionInfoW
CreateDirectoryW
SetStdHandle
GlobalMemoryStatus
GetACP
SetEnvironmentVariableA
InterlockedIncrement
GetCommandLineA
GetDriveTypeA
RemoveDirectoryW
IsValidCodePage
CreateFileW
CreateEventW
InitializeCriticalSection
TlsFree
CloseHandle
GetTempPathW
GetModuleHandleW
UnhandledExceptionFilter
FreeEnvironmentStringsW
QueryPerformanceFrequency
CreateFileA
GetStdHandle
GetTempFileNameW
EnumSystemLocalesA
GetSystemDirectoryW
LCMapStringW
CreateThread
ExitProcess
PeekNamedPipe
GetVersionExW
GetOEMCP
CompareStringW
MultiByteToWideChar
WideCharToMultiByte
FileTimeToSystemTime
VirtualFree
WriteConsoleW
DeleteFileW
GetModuleHandleA
GetModuleFileNameA
HeapReAlloc
InterlockedExchange
TerminateProcess
FindNextFileW
VirtualQuery
GetVersion
SetHandleCount
HeapFree
LoadLibraryExW
FileTimeToLocalFileTime
GlobalFree
GetEnvironmentStrings
ReadFile
WaitForSingleObject
SetEvent
GetFileType
GetConsoleOutputCP
TlsSetValue
InitializeCriticalSectionAndSpinCount
WriteFile
RaiseException
FormatMessageW
GetModuleFileNameW
FreeLibrary
GetStringTypeW
IsValidLocale
InterlockedDecrement
GetCommandLineW
GetTickCount64
GetLocaleInfoW
GetFileAttributesW
GetTickCount
GetLocaleInfoA
GetFullPathNameW
GetFileSizeEx
GetTimeFormatA
SetPriorityClass
SetFileAttributesW
FindClose
WaitForMultipleObjects
GetFileSize
ResetEvent
GetLastError
SleepEx
GetProcAddress
LCMapStringA
TlsGetValue
WriteConsoleA
SetEndOfFile
SetFileTime
GetDriveTypeW
HeapCreate
CompareFileTime
GetSystemTimeAsFileTime
GetCurrentThreadId
HeapSize
GetCPInfo

user32

GetFocus
ScreenToClient
SystemParametersInfoW
GetWindowLongW
SendMessageW
MessageBoxW
GetKeyState
KillTimer
SetTimer
SetFocus
IsDlgButtonChecked
GetWindowTextLengthW
GetWindowRect
LoadIconW
GetParent
MonitorFromWindow
GetWindowTextW
SetClipboardData
SetCursor
LoadStringW
SetDlgItemTextW
DialogBoxParamW
SetWindowTextW
ShowWindow
CloseClipboard
EmptyClipboard
CheckDlgButton
MoveWindow
MapDialogRect
GetDlgItem
SetWindowLongW
PostMessageW
LoadCursorW
EndDialog
InvalidateRect
EnableWindow
CharUpperW
GetMonitorInfoA
OpenClipboard

advapi32

CryptDestroyKey
CryptAcquireContextW
CryptDestroyHash
CryptImportKey
CryptHashData
CryptReleaseContext
CryptGenRandom
CryptCreateHash
CloseServiceHandle
CryptEncrypt
CryptGetHashParam

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW

ole32

CoCreateInstance
CoInitialize
CoTaskMemFree
CoUninitialize
OleInitialize

oleaut32

SysAllocString
SysAllocStringLen
VariantClear
SysFreeString
SysStringLen

ws2_32

getsockopt
htons
socket
bind
ntohs
getsockname
setsockopt
freeaddrinfo
WSAGetLastError
recv
WSACreateEvent
WSAResetEvent
WSAIoctl
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
WSAEventSelect
WSAStartup
WSACleanup
send
closesocket
getpeername
connect
WSASetLastError
sendto
recvfrom
accept
listen
select
__WSAFDIsSet
WSACloseEvent
getaddrinfo
htonl
ioctlsocket
gethostname

crypt32

CertFindCertificateInStore
PFXImportCertStore
CertEnumCertificatesInStore
CertCreateCertificateChainEngine
CertFreeCertificateChain
CertGetCertificateChain
CertCloseStore
CertFreeCertificateChainEngine
CertFreeCertificateContext
CryptQueryObject
CertOpenStore
CryptDecodeObjectEx
CertAddCertificateContextToStore
CertFindExtension
CryptStringToBinaryW

wldap32

ord208
ord216
ord46
ord41
ord27
ord301
ord167
ord79
ord142
ord127
ord147
ord133
ord26
ord145
ord219
ord14
ord117
ord73

Exports

Exports

UpdChecksum

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c2e4791889cf24c2db73f150fc6c89c6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

ws2_32

crypt32

wldap32

Exports

Exports

Sections

.text Size: 2.5MB - Virtual size: 2.5MB

.rdata Size: 125KB - Virtual size: 124KB

.data Size: 6KB - Virtual size: 30KB

.rsrc Size: 9KB - Virtual size: 9KB

.reloc Size: 49KB - Virtual size: 49KB

.text
Size: 2.5MB - Virtual size: 2.5MB

.rdata
Size: 125KB - Virtual size: 124KB

.data
Size: 6KB - Virtual size: 30KB

.rsrc
Size: 9KB - Virtual size: 9KB

.reloc
Size: 49KB - Virtual size: 49KB